Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an executable extension.

The remote host is affected by the vulnerability described in GLSA-201310-21 (MediaWiki: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in MediaWiki. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker may be able to execute arbitrary code, perform       man-in-the-middle attacks, obtain sensitive information or perform       cross-site scripting attacks.
  Workaround :

    There is no known workaround at this time.

- (bug 48306) SECURITY: Run file validation checks on     chunked uploads, and chunks of upload, during the upload     process.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its version number, the instance of MediaWiki running on the remote host is affected by an arbitrary file upload vulnerability due to a flaw that fails to validate file extensions when files are uploaded via chunks using the API. 

Note that Nessus has not tested for this issue but has instead relied on the application's self-reported version number.

The remote web server is running MediaWiki.

The application is prone to an arbitrary file-upload vulnerability because it fails to adequately validate files before uploading them to the vulnerable server. An attacker can exploit this issue to upload a chunk file through API.

ID	Name	Product	Family	Severity
70677	GLSA-201310-21 : MediaWiki: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
67370	Fedora 17 : mediawiki-1.19.7-1.fc17 (2013-9622)	Nessus	Fedora Local Security Checks	medium
67368	Fedora 18 : mediawiki-1.19.7-1.fc18 (2013-9616)	Nessus	Fedora Local Security Checks	medium
66841	MediaWiki 1.19.x < 1.19.7 / 1.20.x < 1.20.6 Arbitrary File Upload	Nessus	CGI abuses	medium
6842	MediaWiki Arbitrary File Upload Vulnerability	Nessus Network Monitor	CGI	high

Detections

Analytics

CVE-2013-2114

critical

Tenable Plugins

high

medium

medium

medium

high